CDPSE practice questions 161–170

1. Question 161 · 229 in bank

   Which of the following poses the GREATEST privacy risk for users of an application that collects their geolocation information?

   • AComplex legal disclosures
   • BInaccurate cell tower triangulation
   • CUse of the location data for user profiling
   • DThird-party access to aggregated location data

   Show answer

   Answer: D

   Next question

2. Question 162 · 229 in bank

   Which of the following is the BEST indication that an organization needs to perform a privacy impact assessment (PIA)?

   • AThe privacy policy is included in an online training course.
   • BAn inventory of personal information is reported to stakeholders.
   • CThe privacy practices are being reviewed by clients.
   • DNew personal information categories are being collected about customers.

   Show answer

   Answer: D

   Next question

3. Question 163 · 229 in bank

   Which of the following BEST enables an IT privacy practitioner to ensure high quality and accurate personal data collection?

   • AImplementing appropriate data validation mechanisms
   • BConducting an annual data inventory and review of data process flows
   • CPerforming periodic reviews of data repositories and access management
   • DIdentifying risk scenarios related to record mismatching and personal harm

   Show answer

   Answer: A

   Next question

4. Question 164 · 229 in bank

   Which of the following should an organization do FIRST to mitigate the risk of employees mishandling personal data?

   • AConduct personal data awareness training
   • BEncrypt all personal data
   • CEstablish data classification levels
   • DImplement a data loss prevention (DLP) tool

   Show answer

   Answer: A

   Next question

5. Question 165 · 229 in bank

   An organization has developed a tracking system to better understand customer purchasing behavior. Prior to deployment it is discovered that the consumer privacy policy does not properly convey that customer purchases may be tracked in this way. Which of the following is the BEST course of action?

   • ACreate a script for customer service representatives to describe the change when customers call.
   • BInclude a notice in the purchase confirmation that informs customers of the tracking.
   • CDelay launching the system until the privacy policy and notice have been updated.
   • DWhen the system is launched, collect the data but do not analyze it until the policy and notice have been updated.

   Show answer

   Answer: C

   Next question

6. Question 166 · 229 in bank

   Which of the following poses the GREATEST privacy risk for client-side application processing?

   • AFailure of a firewall protecting the company network
   • BAn employee loading personal information on a company laptop
   • CA remote employee placing communication software on a company server
   • DA distributed denial of service attack (DDoS) on the company network

   Show answer

   Answer: B

   Next question

7. Question 167 · 229 in bank

   Which of the following BEST represents privacy threat modeling methodology?

   • AMitigating inherent risks and threats associated with privacy control weaknesses
   • BSystematically eliciting and mitigating privacy threats in a software architecture
   • CReliably estimating a threat actor’s ability to exploit privacy vulnerabilities
   • DReplicating privacy scenarios that reflect representative software usage

   Show answer

   Answer: B

   Next question

8. Question 168 · 229 in bank

   Which of the following is the PRIMARY consideration to ensure control of remote access is aligned to the privacy policy?

   • AAccess is logged on the virtual private network (VPN).
   • BMulti-factor authentication is enabled.
   • CActive remote access is monitored.
   • DAccess is only granted to authorized users.

   Show answer

   Answer: D

   Next question

9. Question 169 · 229 in bank

   Which of the following scenarios poses the GREATEST risk to an organization from a privacy perspective?

   • AThe organization lacks a hardware disposal policy.
   • BEmails are not consistently encrypted when sent internally.
   • CPrivacy training is carried out by a service provider.
   • DThe organization’s privacy policy has not been reviewed in over a year.

   Show answer

   Answer: B

   Next question

10. Question 170 · 229 in bank

    Within a business continuity plan (BCP), which of the following is the MOST important consideration to ensure the ability to restore availability and access to personal data in the event of a data privacy incident?

    • AOffline backup availability
    • BRecovery time objective (RTO)
    • CRecovery point objective (RPO)
    • DOnline backup frequency

    Show answer

    Answer: C

    Explanation

    I suspect A is incorrect as the RPO dictates backup requirements and availability of data. Unless I have misinterpreted the question, I would answer C here.

    Source: Adapted from community discussion — Ninja_Theory

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDPSE practice, question 161. 229 questions available.